System Incidents Report

[prasanga]

Hi

Where can i view or get a report of system related incidents happened in the firewall giving a time period ?

Ex : HA failovers / Interface up-down incidents / Hardware level issues happened

regards,

Prasanga

[796570686578]

HA Failovers you can see with the command "cphaprob show_failover".  Not sure about Interface statuses but they are usually logged in /var/log/messages as far as I know.

[Tal_Paz-Fridman]

Hi

Use the cpview command which contains an infinite amount of information about the gateway:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

It also has a history mode (cpview -t) to see historical values and incidents.

HTH

Tal

[Tal_Paz-Fridman]

Hi, this was just published if you're interested in learning more about CPview - CPview and DiagnosticsView TechTalk: Video, Q&A, and Slides

https://community.checkpoint.com/t5/Security-Gateways/CPview-and-DiagnosticsView-TechTalk-Video-Q-am...

[Timothy_Hall]

Try this log filter in the SmartConsole: origin:gwname AND type:Control

You must capitalize "Control" for that filter to work.  If the gateway is using ClusterXL those logs will show interface failures detected by CCP, however some system events only appear in /var/log/messages unless you do this: sk102995: How to export syslog messages from Gaia Security Gateway to a Log Server and view them in ... 

[Ruan_Kotze]

Surprised this has not been mentioned yet, but check out HealthCheck Point.

[prasanga]

Found a place to view these in "SmartView".

Can filter by Type - "System Alert" and Blade- "Firewal".

Thanks all for the responses.